This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
File:                     3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa (raw, json)
Hash identifier:          ZpqqLfiTiI580tEXAz6U+udyWcf7SRBSyK07xLBftmk=
Subject key identifier:   35:86:28:12:CB:81:ED:94:3B:14:FE:66:CC:6A:8B:45:99:DD:97:F6
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       2F26206E0369FD01C9D179B2FC1F2EAFE55A0A22
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
Signing time:             Thu 13 Nov 2025 10:00:00 +0000
ROA not before:           Thu 13 Nov 2025 09:55:00 +0000
ROA not after:            Thu 12 Nov 2026 10:00:00 +0000
asID:                     9794
IP address blocks:        115.178.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:20:6e:03:69:fd:01:c9:d1:79:b2:fc:1f:2e:af:e5:5a:0a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Nov 13 09:55:00 2025 GMT
            Not After : Nov 12 10:00:00 2026 GMT
        Subject: CN=35862812CB81ED943B14FE66CC6A8B4599DD97F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:f5:07:37:b5:6a:3b:77:e4:03:e7:12:18:
                    d5:99:88:56:5e:f2:ee:90:f0:e2:cc:43:91:07:67:
                    fd:44:e3:02:af:7c:1a:75:58:11:6f:75:c9:b5:43:
                    fa:b3:cc:fd:76:a4:db:ac:ee:16:18:28:fb:36:7d:
                    7e:7b:68:1d:e3:3c:10:2e:60:4b:cc:47:1d:1b:db:
                    8b:b8:32:91:0f:ee:8a:bd:ef:37:64:7e:0d:13:f4:
                    a4:46:87:78:3c:94:7b:51:42:29:b1:46:bb:6b:a7:
                    ed:24:56:1b:44:18:08:e5:c6:01:e9:2e:f7:bd:86:
                    43:93:0f:36:94:42:04:62:c1:fa:7e:84:0a:94:55:
                    18:46:d7:a5:f9:6d:32:13:ae:58:e2:fa:1d:ec:d4:
                    bd:9e:b4:6b:b1:70:1c:5c:37:97:24:c2:e8:50:b2:
                    ce:8b:63:5d:02:11:2b:e6:cb:f0:e8:a7:15:ff:ae:
                    04:36:59:a7:7f:d9:88:f9:bb:fe:dc:f5:d7:7b:ff:
                    64:ce:95:18:d2:e0:e1:59:ec:a3:14:72:f0:c5:b4:
                    93:c2:ab:50:51:e1:ca:69:6f:75:a8:6f:a6:71:3c:
                    d7:0e:40:52:55:46:1c:22:d6:ce:63:4c:01:ca:97:
                    8f:94:d1:20:a5:4c:48:0a:32:4e:69:cf:34:f8:ea:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:86:28:12:CB:81:ED:94:3B:14:FE:66:CC:6A:8B:45:99:DD:97:F6
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:ca:ee:3b:5d:e3:72:df:ca:ad:6d:21:96:b1:5c:3b:8f:
         c6:6e:57:be:00:de:e3:ac:b1:43:75:28:79:1d:c6:e9:e2:09:
         d3:7b:b8:01:65:3c:aa:90:ee:30:95:58:9f:db:b5:7d:e9:31:
         ed:8d:0e:58:bc:af:22:3f:2f:19:cc:6c:05:9c:23:67:41:e7:
         e4:96:9b:58:cf:9a:30:04:c8:35:f2:85:7a:8d:e9:da:cd:8a:
         99:c2:4d:a4:97:24:91:1d:e6:a7:c9:fa:64:81:7b:e1:46:4f:
         20:f4:2b:92:23:10:54:7a:34:29:16:27:3f:83:1a:db:17:e4:
         17:1f:c0:de:b6:0f:17:ac:7a:0c:a2:ec:51:52:cc:e0:75:b2:
         0f:49:59:f9:57:ce:37:c2:d1:ec:01:42:b6:7e:85:68:5a:5f:
         3e:96:6e:9c:93:a6:ba:27:7e:6e:1f:7d:74:1c:bf:80:b7:02:
         ab:20:b2:f1:0a:5c:55:ef:21:66:df:23:a2:99:8e:e3:7f:3f:
         e3:41:f2:35:47:db:16:cd:37:d2:0c:92:e7:7d:63:28:2e:4f:
         f2:76:08:3f:7f:c6:f7:fc:b9:b7:e1:a1:e6:91:e0:27:9e:6b:
         22:b2:88:5b:81:52:77:f5:ab:88:79:c4:f8:cd:ce:00:b2:d2:
         6c:d5:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:07 2025 by rpki-client